Privacy Policy

1 Introduction

x999 Casino ("x999," "we," "us," or "our") operates the online gaming platform accessible at x999.asia. As the personal information controller of the data you provide to us, x999 takes its obligations under the Data Privacy Act of 2012 (Republic Act No. 10173) and all related issuances of the National Privacy Commission ("NPC") of the Philippines seriously.

This Privacy Policy describes the types of personal data x999 collects from players and visitors, the purposes for which that data is processed, the parties with whom it may be shared, the security measures x999 employs to protect it, and the rights available to you as a data subject under Philippine law.

By registering for an x999 account or otherwise using the x999 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must not use the x999 platform.

2 Personal Data We Collect

x999 collects the following categories of personal data from players and platform visitors:

x999 does not collect sensitive personal information beyond what is strictly necessary for identity verification, regulatory compliance, and responsible gaming purposes. x999 does not collect biometric data, health records, or political affiliations.

3 How We Collect Your Data

x999 collects personal data through the following means:

• Direct interactions: Data you provide when registering an x999 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical data collected automatically when you visit the x999 platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity and address verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment data from GCash, Maya, and Philippine banking partners.
• Regulatory sources: Self-exclusion status data from PAGCOR or other recognized gaming regulatory bodies where x999 is required to cross-reference player eligibility.

4 How We Use Your Personal Data

x999 processes your personal data for the following purposes:

• Account management: To create, maintain, verify, and administer your x999 player account, including processing deposits, withdrawals, and bonus claims.
• Identity verification and KYC: To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct on the x999 platform.
• Regulatory compliance: To fulfill x999's obligations under applicable Philippine gaming regulations, tax laws, and financial crime prevention legislation.
• Customer support: To respond to your inquiries, resolve complaints, and provide technical assistance.
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce self-exclusion requests, and administer deposit limits and other responsible gaming tools.
• Platform improvement: To analyze usage patterns, improve game offerings, optimize platform performance, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time.
• Legal proceedings: To establish, exercise, or defend legal claims in connection with your x999 account or use of the platform.

5 Legal Basis for Processing

x999 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between x999 and you as a registered player, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with x999's obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, and tax legislation.
• Legitimate interests: Processing necessary for x999's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly in relation to marketing communications and the use of non-essential cookies.

6 Data Sharing and Disclosure

x999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. x999 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• KYC and identity verification providers: Third-party services engaged to verify your identity and age as required by Philippine regulations.
• Payment processors: GCash, Maya, and Philippine banking partners engaged to process your deposits and withdrawals.
• Fraud prevention and AML screening services: Third-party providers engaged to screen transactions and player activity for signs of money laundering or fraud.
• Gaming software providers: Game developers and platform technology providers who supply the games and software infrastructure used on the x999 platform.
• Regulatory authorities: PAGCOR and other competent Philippine government authorities where x999 is legally required to disclose player data.
• Law enforcement: Philippine law enforcement agencies where x999 is required by law or court order to disclose personal data.
• Professional advisers: Lawyers, auditors, and accountants engaged by x999 in connection with legal, compliance, or financial matters, subject to professional confidentiality obligations.

All third parties with whom x999 shares personal data are required to process that data in accordance with applicable Philippine privacy laws and x999's data processing standards.

7 Cookies and Tracking Technologies

The x999 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. The following categories of cookies are used on x999:

• Strictly necessary cookies: Essential for the operation of the x999 platform, including session management, login authentication, and security features. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the x999 platform, helping x999 improve its services. These cookies are only set with your consent.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of x999 marketing campaigns. These cookies are only set with your consent.

You may manage your cookie preferences through your browser settings or through the cookie consent banner displayed when you first visit x999. Please note that disabling certain cookies may affect the functionality of the x999 platform.

8 Data Retention

x999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active account data: Retained for the duration of your x999 account and for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Responsible gaming records: Self-exclusion and responsible gaming tool records are retained for the duration of the exclusion period and for a minimum of five (5) years thereafter.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, after which it will be suppressed from marketing lists within a reasonable timeframe.
• Technical and analytics data: Typically retained in aggregated or anonymized form for up to two (2) years.

Upon expiry of the applicable retention period, x999 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9 Data Security

x999 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the x999 platform
• Encryption of sensitive data at rest, including financial data and government ID information
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security assessments and penetration testing of the x999 platform infrastructure
• Multi-factor authentication requirements for x999 staff accessing systems containing personal data
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, x999 will notify the National Privacy Commission and affected players in accordance with the timeframes and procedures prescribed by the Data Privacy Act of 2012 and NPC regulations.

10 Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by x999:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data x999 holds about you and information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data x999 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to x999's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on x999's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to withdraw consent: The right to withdraw your consent to processing at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe x999 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact x999's Data Protection Officer at the contact details provided in Section 14 of this Privacy Policy. x999 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11 Children's Privacy

The x999 platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. x999 does not knowingly collect personal data from individuals under the age of 21.

If x999 becomes aware that personal data has been collected from a person under 21 years of age, x999 will immediately suspend the associated account, delete the personal data in question, and take appropriate steps to prevent further access by that individual. If you believe that x999 may have inadvertently collected data from a minor, please contact x999 support immediately.

12 International Data Transfers

Where x999 transfers your personal data to third-party service providers located outside the Philippines – for example, cloud infrastructure providers or game software developers – x999 ensures that such transfers are carried out in compliance with the Data Privacy Act of 2012 and applicable NPC regulations.

x999 implements appropriate safeguards for international data transfers, which may include contractual data processing agreements incorporating standard data protection clauses, or transfers to recipients in jurisdictions recognized by the NPC as providing an adequate level of data protection.

13 Changes to This Privacy Policy

x999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or x999's data processing practices. The date of the most recent revision is displayed at the top of this page.

Where changes are material, x999 will make reasonable efforts to notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the x999 platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.

x999 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected.

14 Contact Us – Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or x999's handling of your personal data, please contact x999's designated Data Protection Officer:

• Email: [email protected]
• Support email: [email protected]
• Response time: Within 15 business days of receipt
• Languages: English and Filipino

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with x999's response to your data subject request.